Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/wOab5qI0t4FofSq03RGvaYJ4_o0.roa
File: wOab5qI0t4FofSq03RGvaYJ4_o0.roa (raw, json)
Hash identifier: ypLvXSFmWVWlhloxb/9tsuiDF7HDThEvZjOHieXfHbs=
Subject key identifier: C0:E6:9B:E6:A2:34:B7:81:68:7D:2A:B4:DD:11:AF:69:82:78:FE:8D
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 018CC726B2D38BFE9B27D2AC6A2FFCF71707
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/wOab5qI0t4FofSq03RGvaYJ4_o0.roa
Signing time: Mon 01 Jan 2024 22:30:51 +0000
ROA not before: Mon 01 Jan 2024 22:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41179
IP address blocks: 80.90.7.0/24 maxlen: 24
2a02:cb43:2003::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:b2:d3:8b:fe:9b:27:d2:ac:6a:2f:fc:f7:17:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Jan 1 22:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0e69be6a234b781687d2ab4dd11af698278fe8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:32:55:b7:4b:d4:14:6b:40:00:91:48:2a:
18:d4:39:78:45:18:4c:59:6e:6b:25:b6:c1:c5:b3:
1b:0e:cd:4e:c2:9a:95:64:62:94:f0:a8:8c:6c:3f:
75:d9:fe:46:10:75:6b:1e:18:12:e0:89:f1:22:4f:
01:e4:52:93:27:bf:ac:ce:9b:a8:09:bf:34:73:97:
3e:1f:ec:60:57:b7:d1:da:e5:99:16:db:a2:ec:85:
21:7d:c1:53:5b:7f:d7:34:4b:c4:9a:a3:dd:07:6e:
2b:18:a4:65:f5:a6:cf:d1:1a:82:55:05:f8:12:d1:
ff:a3:af:cf:c1:a2:ed:45:a6:38:cc:e8:75:00:76:
04:a1:d2:74:5f:04:cd:a4:ee:87:0d:c0:ed:78:92:
50:76:2d:73:10:4b:a2:ee:19:38:90:8e:68:1c:56:
e2:1e:42:85:3b:1d:de:e4:b2:7b:df:6a:8f:78:ba:
f9:40:5c:4b:1a:88:08:a5:5a:1e:e1:4a:31:23:ab:
94:a8:45:fe:a2:ea:cc:67:44:59:de:cf:7e:fb:1d:
a2:a6:04:30:0e:25:86:16:bd:e5:98:84:ba:b6:ca:
a3:cb:ec:bb:14:d1:63:77:9d:66:c7:56:43:c8:38:
04:63:3d:fc:15:5d:ed:6e:5a:9a:1b:3a:42:c0:c8:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E6:9B:E6:A2:34:B7:81:68:7D:2A:B4:DD:11:AF:69:82:78:FE:8D
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/wOab5qI0t4FofSq03RGvaYJ4_o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.7.0/24
IPv6:
2a02:cb43:2003::/48
Signature Algorithm: sha256WithRSAEncryption
9b:98:65:36:5b:07:b8:48:15:c4:d7:14:3d:87:ae:a3:b7:db:
6a:7d:16:0b:f5:26:8f:33:f0:ee:2b:92:ca:43:64:41:64:41:
d5:74:79:f6:29:30:07:d0:0f:7c:3e:53:50:e8:fb:66:5b:3a:
16:ea:2b:b9:9c:6d:ec:7e:c7:aa:b6:22:eb:ba:8a:37:14:2f:
1f:c0:62:d2:3e:51:99:63:71:a0:e8:bc:9c:06:c5:ca:11:ac:
7d:78:61:48:c9:04:17:d1:6a:99:0f:e4:4a:04:7c:9b:76:20:
91:56:07:ee:c6:dc:48:aa:9e:2a:b7:0e:66:a0:3e:7a:fa:a2:
12:8d:88:a3:1d:2a:5d:b2:8d:cc:f1:1f:a5:30:cc:fe:1a:a1:
74:ae:4e:fc:72:ef:db:26:f3:49:52:1a:72:0c:fe:cc:9b:80:
b0:db:a4:61:70:73:fe:50:a1:fc:44:a8:18:07:32:93:aa:19:
8d:ba:14:4a:c0:d9:c7:0a:5e:6e:5b:15:d1:a0:47:a4:40:3e:
10:f5:6e:3f:07:9b:60:a5:75:b1:3d:06:b1:50:55:bc:6b:a0:
65:2c:ad:f3:7a:4b:01:ed:47:cb:30:98:a9:58:85:a3:f6:7a:
d7:ac:10:b5:83:59:a1:9f:b2:86:9f:9f:a0:54:31:f9:a7:13:
76:14:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:33 2025 by rpki-client